Skip to content

CVE-2011-4812 Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter.

MediumCVSS 4.3 EPSS 1.5%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Cross-site scripting (XSS) vulnerability in nowosci.php in BestShopPro allows remote attackers to inject arbitrary web script or HTML via the str parameter.

Affected products

ProductAffected versionsFixed in
bst bestshoppro All versions No fix listed

References

  • 46662 third-party-advisory vendor-advisory
  • 18063 exploit
  • 76880 exploit vdb-entry